chore: update schemas from constructive-db

.agents/skills/cli-auth/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: cli-auth
-description: CLI tool (csdk) for the auth API — provides CRUD commands for 9 tables and 30 custom operations
+description: CLI tool (csdk) for the auth API — provides CRUD commands for 13 tables and 34 custom operations
 ---
 
 # cli-auth
 
 <!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
 
-CLI tool (csdk) for the auth API — provides CRUD commands for 9 tables and 30 custom operations
+CLI tool (csdk) for the auth API — provides CRUD commands for 13 tables and 34 custom operations
 
 ## Usage
 
@@ -23,13 +23,13 @@ csdk auth set-token <token>
 csdk config set <key> <value>
 csdk config get <key>
 
-# CRUD for any table (e.g. email)
-csdk email list
-csdk email get --id <value>
-csdk email create --<field> <value>
+# CRUD for any table (e.g. principal)
+csdk principal list
+csdk principal get --id <value>
+csdk principal create --<field> <value>
 
 # Non-interactive mode (skip all prompts, use flags only)
-csdk --no-tty email list
+csdk --no-tty principal list
 ```
 
 ## Examples
@@ -40,13 +40,13 @@ csdk --no-tty email list
 csdk context create local --endpoint http://localhost:5000/graphql
 csdk context use local
 csdk auth set-token <token>
-csdk email list
+csdk principal list
 ```
 
 ### Non-interactive mode (for scripts and CI)
 
 ```bash
-csdk --no-tty email create --<field> <value>
+csdk --no-tty principal create --<field> <value>
 ```
 
 ## References
@@ -56,6 +56,9 @@ See the `references/` directory for detailed per-entity API documentation:
 - [context](references/context.md)
 - [auth](references/auth.md)
 - [config](references/config.md)
+- [principal](references/principal.md)
+- [principal-entity](references/principal-entity.md)
+- [principal-scope-override](references/principal-scope-override.md)
 - [email](references/email.md)
 - [phone-number](references/phone-number.md)
 - [crypto-address](references/crypto-address.md)
@@ -64,21 +67,24 @@ See the `references/` directory for detailed per-entity API documentation:
 - [identity-provider](references/identity-provider.md)
 - [role-type](references/role-type.md)
 - [user-connected-account](references/user-connected-account.md)
+- [org-api-key-list](references/org-api-key-list.md)
 - [user](references/user.md)
 - [current-user-agent](references/current-user-agent.md)
-- [current-ip-address](references/current-ip-address.md)
 - [current-user-id](references/current-user-id.md)
+- [current-ip-address](references/current-ip-address.md)
 - [require-step-up](references/require-step-up.md)
 - [current-user](references/current-user.md)
 - [sign-out](references/sign-out.md)
 - [send-account-deletion-email](references/send-account-deletion-email.md)
 - [check-password](references/check-password.md)
+- [delete-org-principal](references/delete-org-principal.md)
 - [disconnect-account](references/disconnect-account.md)
 - [revoke-api-key](references/revoke-api-key.md)
 - [revoke-session](references/revoke-session.md)
 - [verify-password](references/verify-password.md)
 - [verify-totp](references/verify-totp.md)
 - [confirm-delete-account](references/confirm-delete-account.md)
+- [revoke-org-api-key](references/revoke-org-api-key.md)
 - [set-password](references/set-password.md)
 - [verify-email](references/verify-email.md)
 - [provision-new-user](references/provision-new-user.md)
@@ -89,7 +95,9 @@ See the `references/` directory for detailed per-entity API documentation:
 - [sign-up](references/sign-up.md)
 - [sign-in](references/sign-in.md)
 - [link-identity](references/link-identity.md)
+- [create-org-principal](references/create-org-principal.md)
 - [extend-token-expires](references/extend-token-expires.md)
+- [create-org-api-key](references/create-org-api-key.md)
 - [create-api-key](references/create-api-key.md)
 - [request-cross-origin-token](references/request-cross-origin-token.md)
 - [forgot-password](references/forgot-password.md)

.agents/skills/cli-auth/references/create-api-key.md

@@ -7,13 +7,13 @@ Execute the createApiKey mutation
 ## Usage
 
 ```bash
-csdk create-api-key --input.clientMutationId <String> --input.keyName <String> --input.accessLevel <String> --input.mfaLevel <String> --input.expiresIn <IntervalInput>
+csdk create-api-key --input.clientMutationId <String> --input.keyName <String> --input.accessLevel <String> --input.mfaLevel <String> --input.expiresIn <IntervalInput> --input.principalId <UUID>
 ```
 
 ## Examples
 
 ### Run createApiKey
 
 ```bash
-csdk create-api-key --input.clientMutationId <String> --input.keyName <String> --input.accessLevel <String> --input.mfaLevel <String> --input.expiresIn <IntervalInput>
+csdk create-api-key --input.clientMutationId <String> --input.keyName <String> --input.accessLevel <String> --input.mfaLevel <String> --input.expiresIn <IntervalInput> --input.principalId <UUID>
 ```

.agents/skills/cli-auth/references/create-org-api-key.md

@@ -0,0 +1,19 @@
+# createOrgApiKey
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Execute the createOrgApiKey mutation
+
+## Usage
+
+```bash
+csdk create-org-api-key --input.clientMutationId <String> --input.orgId <UUID> --input.principalId <UUID> --input.keyName <String> --input.accessLevel <String> --input.mfaLevel <String> --input.expiresIn <IntervalInput>
+```
+
+## Examples
+
+### Run createOrgApiKey
+
+```bash
+csdk create-org-api-key --input.clientMutationId <String> --input.orgId <UUID> --input.principalId <UUID> --input.keyName <String> --input.accessLevel <String> --input.mfaLevel <String> --input.expiresIn <IntervalInput>
+```

.agents/skills/cli-auth/references/create-org-principal.md

@@ -0,0 +1,19 @@
+# createOrgPrincipal
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Execute the createOrgPrincipal mutation
+
+## Usage
+
+```bash
+csdk create-org-principal --input.clientMutationId <String> --input.name <String> --input.orgId <UUID> --input.allowedMask <BitString> --input.isReadOnly <Boolean> --input.bypassStepUp <Boolean>
+```
+
+## Examples
+
+### Run createOrgPrincipal
+
+```bash
+csdk create-org-principal --input.clientMutationId <String> --input.name <String> --input.orgId <UUID> --input.allowedMask <BitString> --input.isReadOnly <Boolean> --input.bypassStepUp <Boolean>
+```

.agents/skills/cli-auth/references/delete-org-principal.md

@@ -0,0 +1,19 @@
+# deleteOrgPrincipal
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+Execute the deleteOrgPrincipal mutation
+
+## Usage
+
+```bash
+csdk delete-org-principal --input.clientMutationId <String> --input.principalId <UUID>
+```
+
+## Examples
+
+### Run deleteOrgPrincipal
+
+```bash
+csdk delete-org-principal --input.clientMutationId <String> --input.principalId <UUID>
+```

.agents/skills/cli-auth/references/org-api-key-list.md

@@ -0,0 +1,68 @@
+# orgApiKeyList
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+CRUD operations for OrgApiKeyList records via csdk CLI
+
+## Usage
+
+```bash
+csdk org-api-key-list list
+csdk org-api-key-list list --where.<field>.<op> <value> --orderBy <values>
+csdk org-api-key-list list --limit 10 --after <cursor>
+csdk org-api-key-list find-first --where.<field>.<op> <value>
+csdk org-api-key-list get --id <UUID>
+csdk org-api-key-list create [--keyId <String>] [--name <String>] [--principalId <UUID>] [--orgId <UUID>] [--expiresAt <Datetime>] [--revokedAt <Datetime>] [--lastUsedAt <Datetime>] [--mfaLevel <String>] [--accessLevel <String>]
+csdk org-api-key-list update --id <UUID> [--keyId <String>] [--name <String>] [--principalId <UUID>] [--orgId <UUID>] [--expiresAt <Datetime>] [--revokedAt <Datetime>] [--lastUsedAt <Datetime>] [--mfaLevel <String>] [--accessLevel <String>]
+csdk org-api-key-list delete --id <UUID>
+```
+
+## Examples
+
+### List orgApiKeyList records
+
+```bash
+csdk org-api-key-list list
+```
+
+### List orgApiKeyList records with pagination
+
+```bash
+csdk org-api-key-list list --limit 10 --offset 0
+```
+
+### List orgApiKeyList records with cursor pagination
+
+```bash
+csdk org-api-key-list list --limit 10 --after <cursor>
+```
+
+### Find first matching orgApiKeyList
+
+```bash
+csdk org-api-key-list find-first --where.id.equalTo <value>
+```
+
+### List orgApiKeyList records with field selection
+
+```bash
+csdk org-api-key-list list --select id,id
+```
+
+### List orgApiKeyList records with filtering and ordering
+
+```bash
+csdk org-api-key-list list --where.id.equalTo <value> --orderBy ID_ASC
+```
+
+### Create a orgApiKeyList
+
+```bash
+csdk org-api-key-list create [--keyId <String>] [--name <String>] [--principalId <UUID>] [--orgId <UUID>] [--expiresAt <Datetime>] [--revokedAt <Datetime>] [--lastUsedAt <Datetime>] [--mfaLevel <String>] [--accessLevel <String>]
+```
+
+### Get a orgApiKeyList by id
+
+```bash
+csdk org-api-key-list get --id <value>
+```

.agents/skills/cli-auth/references/principal-entity.md

@@ -0,0 +1,68 @@
+# principalEntity
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+CRUD operations for PrincipalEntity records via csdk CLI
+
+## Usage
+
+```bash
+csdk principal-entity list
+csdk principal-entity list --where.<field>.<op> <value> --orderBy <values>
+csdk principal-entity list --limit 10 --after <cursor>
+csdk principal-entity find-first --where.<field>.<op> <value>
+csdk principal-entity get --id <UUID>
+csdk principal-entity create --principalId <UUID> --entityId <UUID> --ownerId <UUID>
+csdk principal-entity update --id <UUID> [--principalId <UUID>] [--entityId <UUID>] [--ownerId <UUID>]
+csdk principal-entity delete --id <UUID>
+```
+
+## Examples
+
+### List principalEntity records
+
+```bash
+csdk principal-entity list
+```
+
+### List principalEntity records with pagination
+
+```bash
+csdk principal-entity list --limit 10 --offset 0
+```
+
+### List principalEntity records with cursor pagination
+
+```bash
+csdk principal-entity list --limit 10 --after <cursor>
+```
+
+### Find first matching principalEntity
+
+```bash
+csdk principal-entity find-first --where.id.equalTo <value>
+```
+
+### List principalEntity records with field selection
+
+```bash
+csdk principal-entity list --select id,id
+```
+
+### List principalEntity records with filtering and ordering
+
+```bash
+csdk principal-entity list --where.id.equalTo <value> --orderBy ID_ASC
+```
+
+### Create a principalEntity
+
+```bash
+csdk principal-entity create --principalId <UUID> --entityId <UUID> --ownerId <UUID>
+```
+
+### Get a principalEntity by id
+
+```bash
+csdk principal-entity get --id <value>
+```

.agents/skills/cli-auth/references/principal-scope-override.md

@@ -0,0 +1,68 @@
+# principalScopeOverride
+
+<!-- @constructive-io/graphql-codegen - DO NOT EDIT -->
+
+CRUD operations for PrincipalScopeOverride records via csdk CLI
+
+## Usage
+
+```bash
+csdk principal-scope-override list
+csdk principal-scope-override list --where.<field>.<op> <value> --orderBy <values>
+csdk principal-scope-override list --limit 10 --after <cursor>
+csdk principal-scope-override find-first --where.<field>.<op> <value>
+csdk principal-scope-override get --id <UUID>
+csdk principal-scope-override create --principalId <UUID> --membershipType <Int> --allowedMask <BitString> --isAdmin <Boolean> --isReadOnly <Boolean>
+csdk principal-scope-override update --id <UUID> [--principalId <UUID>] [--membershipType <Int>] [--allowedMask <BitString>] [--isAdmin <Boolean>] [--isReadOnly <Boolean>]
+csdk principal-scope-override delete --id <UUID>
+```
+
+## Examples
+
+### List principalScopeOverride records
+
+```bash
+csdk principal-scope-override list
+```
+
+### List principalScopeOverride records with pagination
+
+```bash
+csdk principal-scope-override list --limit 10 --offset 0
+```
+
+### List principalScopeOverride records with cursor pagination
+
+```bash
+csdk principal-scope-override list --limit 10 --after <cursor>
+```
+
+### Find first matching principalScopeOverride
+
+```bash
+csdk principal-scope-override find-first --where.id.equalTo <value>
+```
+
+### List principalScopeOverride records with field selection
+
+```bash
+csdk principal-scope-override list --select id,id
+```
+
+### List principalScopeOverride records with filtering and ordering
+
+```bash
+csdk principal-scope-override list --where.id.equalTo <value> --orderBy ID_ASC
+```
+
+### Create a principalScopeOverride
+
+```bash
+csdk principal-scope-override create --principalId <UUID> --membershipType <Int> --allowedMask <BitString> --isAdmin <Boolean> --isReadOnly <Boolean>
+```
+
+### Get a principalScopeOverride by id
+
+```bash
+csdk principal-scope-override get --id <value>
+```